computer slows and often freezes after 10-30min of usage

Have to restart computer because it slows to a stop after 10 minutes of usage. Restarting also takes a long time. I tried to paste the OTL files but the 2 were too large. Also i can't attach the files. "uploaded file is not valid". What should I do?

Hello.
Copy the two logs into new Notepad files and save them, then attach them, it should work that way.

Hi,

Got the OTL files attached as you requested.

Please download and run this tool.

Download Malwarebytes' Anti-Malware from Here

Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
  
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  

Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately.

Post the contents of the MBAM Log.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4157

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.11

5/31/2010 9:51:56 PM
mbam-log-2010-05-31 (21-51-56).txt

Scan type: Full scan (C:\|D:\|E:\|F:\|)
Objects scanned: 261495
Time elapsed: 1 hour(s), 47 minute(s), 30 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Run ESET Online Scan
Please do an online scan with ESET Online Scanner. Please use Internet Explorer as it uses ActiveX.

• Check (tick) this box: YES, I accept the Terms of Use.
  
• Click on the Start button next to it.
  
• When prompted to run ActiveX. click Yes.
  
• You will be asked to install an ActiveX. Click Install.
  
• Once installed, the scanner will be initialized.
  
• After the scanner is initialized, click Start.
  
• Check (tick) Remove found threats box.
  
• Check (tick) Scan unwanted applications.
  
• Click on Scan.
  
• It will start scanning. Please be patient.
  
• Once the scan is done, the log will be saved here: C:\Program Files\esetonlinescanner\log.txt.
  

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=7
# iexplore.exe=7.00.6000.20583 (vista_ldr.070420-1500)
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=04cea6c5f359f840be353234ea7998f4
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2010-01-22 04:58:19
# local_time=2010-01-22 11:58:19 (+0700, SE Asia Standard Time)
# country="United States"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode=512 16777215 100 0 359024 359024 0 0
# compatibility_mode=1280 16777175 100 0 44163294 44163294 0 0
# compatibility_mode=8192 67108863 100 0 146323 146323 0 0
# scanned=143667
# found=1
# cleaned=1
# scan_time=1800
C:\Program Files\Vietkey2000\vknt.exe probably a variant of Win32/Agent trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
# version=7
# iexplore.exe=7.00.6000.20583 (vista_ldr.070420-1500)
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=04cea6c5f359f840be353234ea7998f4
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2010-06-01 01:56:34
# local_time=2010-06-01 08:56:34 (+0700, SE Asia Standard Time)
# country="United States"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=512 16777215 100 0 11534159 11534159 0 0
# compatibility_mode=1280 16777175 100 0 55338429 55338429 0 0
# compatibility_mode=8192 67108863 100 0 11321458 11321458 0 0
# scanned=144421
# found=0
# cleaned=0
# scan_time=4559

Hello.
Still having problems?

have to try for a few days and get back to you but the initial results seem good. Thanks.

i don't have norton antivirus installed but it pops up a warning once in awhile asks me to download.... and i can't close it. And the wording seems to be wrong with even a spelling mistake.

Hello.

• Download combofix from here
  Link 1
  Link 2
  
  1. If you are using Firefox, make sure that your download settings are as follows:
  
  * Tools->Options->Main tab
  * Set to "Always ask me where to Save the files".
  
  2. During the download, rename Combofix to Combo-Fix as follows:
  
  
  
  
  
  3. It is important you rename Combofix during the download, but not after.
  4. Please do not rename Combofix to other names, but only to the one indicated.
  5. Close any open browsers.
  6. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  
  
• We need to disable your local AV (Anti-virus) before running Combofix.
  
• See HERE for how to disable your AV.
  
• Double click on ComboFix.exe.
  
• Follow the prompts. NOTE:
  
• ComboFix will check to see if the Microsoft Windows Recovery Console is installed.
  ***It's strongly recommended to have the Recovery Console installed before doing any malware removal.***
  
  **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will automatically proceed with its scan.
  
  
  
• The Recovery Console provides a recovery/repair mode should a problem occur during a Combofix run.
  
  
  
  
• Allow ComboFix to download the Recovery Console.
  
• Accept the End-User License Agreement.
  
• The Recovery Console will be installed.
  
• You will then get this next prompt that asks if you want to continue the malware scan, select yes
  
  
  
  
• Allow combofix to run
  
• Post C:\combofix.txt back here.
  
  Note:
  Do not mouseclick combofix's window whilst it's running. That may cause it to stall.
  

combofix txt attached

Okay, next log to get.

Please download CKScanner by askey127 from here
Save it to your desktop.

• Doubleclick CKScanner.exe and click Search For Files.
  
• After a very short time, when the cursor hourglass disappears, click Save List To File.
  
• A message box will verify that the file is saved.
  
• Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.
  

CKScanner - Additional Security Risks - These are not necessarily bad
c:documents and settingsa newdesktopcuteftp.pro.v8.3.2.build.09.02.2008.1.incl.crack.rar
c:documents and settingsa newdesktopcracknope.nfo
c:documents and settingsa newdesktopcrackwww.9down.com.url
c:downloadscuteftp(1).pro.v8.3.2.build.09.02.2008.1.incl.crack.rar
c:downloadscuteftp.pro.v8.3.2.build.09.02.2008.1.incl.crack(1).rar
c:downloadscuteftp.pro.v8.3.2.build.09.02.2008.1.incl.crack.rar
scanner sequence 3.DD.11
----- EOF -----

Hello.
One more log then we'll do some removal.

Hello.

Please download the current version of HijackThis from HERE

• Double click and run the installer.
  
• It will install to C:Program FilesTrend MicroHijackThishijackthis.exe
  
• After installing, you should get the user agreement, press accept and Hijack This will run.
  
• When Hijack This opens, click "Open the Misc Tools section"
  
• Then select "Open Uninstall Manager"
  
• Click on "Save List..." (generates uninstall_list.txt)
  
• Click Save, copy and paste the results in your next post.
  

Acrobat.com
Acrobat.com
Add or Remove Adobe Creative Suite 3 Master Collection
Adobe After Effects CS3
Adobe After Effects CS3 Presets
Adobe AIR
Adobe AIR
Adobe Anchor Service CS3
Adobe Asset Services CS3
Adobe Bridge CS3
Adobe Bridge Start Meeting
Adobe BridgeTalk Plugin CS3
Adobe Camera Raw 4.0
Adobe CMaps
Adobe Color - Photoshop Specific
Adobe Color Common Settings
Adobe Color EU Extra Settings
Adobe Color JA Extra Settings
Adobe Color NA Recommended Settings
Adobe Contribute CS3
Adobe Creative Suite 3 Master Collection
Adobe Default Language CS3
Adobe Device Central CS3
Adobe Dreamweaver CS3
Adobe Encore CS3
Adobe Encore CS3 Codecs
Adobe ExtendScript Toolkit 2
Adobe Extension Manager CS3
Adobe Fireworks CS3
Adobe Flash CS3
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Flash Video Encoder
Adobe Fonts All
Adobe Help Viewer CS3
Adobe Illustrator CS3
Adobe InDesign CS3
Adobe InDesign CS3 Icon Handler
Adobe Linguistics CS3
Adobe MotionPicture Color Files
Adobe PDF Library Files
Adobe Photoshop CS3
Adobe Photoshop CS3
Adobe Premiere Pro CS3
Adobe Premiere Pro CS3 Functional Content
Adobe Premiere Pro CS3 Third Party Content
Adobe Reader 9
Adobe Setup
Adobe Setup
Adobe Shockwave Player 11
Adobe SING CS3
Adobe Soundbooth CS3
Adobe Soundbooth CS3 Codecs
Adobe Stock Photos CS3
Adobe Type Support
Adobe Update Manager CS3
Adobe Version Cue CS3 Client
Adobe Version Cue CS3 Server
Adobe Video Profiles
Adobe WAS CS3
Adobe WinSoft Linguistics Plugin
Adobe XMP DVA Panels CS3
Adobe XMP Panels CS3
AGEIA PhysX v2.3.3
AHV content for Acrobat and Flash
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Applian FLV Player
Atheros Communications Inc.(R) L1 Gigabit Ethernet Driver
Bonjour
Cave Management System
CDDRV_Installer
CorelDRAW Graphics Suite X3
CuteFTP 8 Professional
EN
ESET Online Scanner v3
FontNav
Form Fill (Windows Live Toolbar)
Google Earth
Google Update Helper
HiJackThis
HijackThis 2.0.2
InfoWorks History Sweeper (remove only)
iTunes
Java(TM) 6 Update 20
jetAudio
Kaspersky Anti-Virus 2009
Kaspersky Anti-Virus 2009
KhalInstallWrapper
K-Lite Codec Pack 4.1.7 (Standard)
Lexmark Software Uninstall
Logitech SetPoint
Malwarebytes' Anti-Malware
Map Button (Windows Live Toolbar)
Medieval II Total War
Mega Manager
Microsoft Choice Guard
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Office Professional Edition 2003
Microsoft Search Enhancement Pack
Microsoft Sync Framework Runtime Native v1.0 (x86)
Microsoft Sync Framework Services Native v1.0 (x86)
Microsoft Visual C++ 2005 Redistributable
Moyea FLV Player version: 2.0.2.94
Mozilla Firefox (3.5)
MSVCRT
NVIDIA Drivers
OneCare Advisor (Windows Live Toolbar)
Orbit Downloader
PDF Settings
PE Builder 3.1.10a
Popup Blocker (Windows Live Toolbar)
QuickTime
Realtek High Definition Audio Driver
RMVB Converter 1.8
Security Update for Windows XP (KB958644)
Segoe UI
Skype 3.8
Smart Menus (Windows Live Toolbar)
SopCast 3.2.8
Tweak UI
ubi.com
Update Manager
VBA
VIA Platform Device Manager
Vietkey 2000
ViiKii Desktop Plug-in
ViiKii Desktop Plug-in
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Essentials
Windows Live Favorites for Windows Live Toolbar
Windows Live Messenger
Windows Live Outlook Toolbar (Windows Live Toolbar)
Windows Live Sign-in Assistant
Windows Live Toolbar
Windows Live Toolbar Extension (Windows Live Toolbar)
Windows Live Toolbar Feed Detector (Windows Live Toolbar)
Windows Live Upload Tool
Windows XP Service Pack 3
WinRAR archiver

Hello.

Please download the OTMoveIt by OldTimer.

• Save it to your desktop.
  
• Please double-click OTM.exe to run it.
  
• Copy the bolded text below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
  
  
  :files
  c:\program files\LimeWire
  c:\documents and settings\A NEW\Application Data\uTorrent
  c:\documents and settings\a new\desktop\cuteftp.pro.v8.3.2.build.09.02.2008.1.incl.crack.rar
  c:documents and settings\a new\desktop\cracknope.nfo
  c:\documents and settings\a new\desktop\crackwww.9down.com.url
  c:\downloads\cuteftp(1).pro.v8.3.2.build.09.02.2008.1.incl.crack.rar
  c:\downloads\cuteftp.pro.v8.3.2.build.09.02.2008.1.incl.crack(1).rar
  c:\downloads\cuteftp.pro.v8.3.2.build.09.02.2008.1.incl.crack.rar
  
  
  
• Return to OTMoveIt, right click in the "Paste instructions for items to be Moved" window (under the light blue bar) and choose Paste.
  
• Click the red Moveit! button.
  
• Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  
• Close OTMoveIt
  

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

Please post the OTMoveIt log.

========== FILES ==========
c:\program files\LimeWire folder moved successfully.
c:\documents and settings\A NEW\Application Data\uTorrent folder moved successfully.
c:\documents and settings\a new\desktop\CuteFTP.Pro.v8.3.2.Build.09.02.2008.1.Incl.Crack.rar moved successfully.
File/Folder c:documents and settings\a new\desktop\cracknope.nfo not found.
File/Folder c:\documents and settings\a new\desktop\crackwww.9down.com.url not found.
c:\downloads\CuteFTP(1).Pro.v8.3.2.Build.09.02.2008.1.Incl.Crack.rar moved successfully.
c:\downloads\CuteFTP.Pro.v8.3.2.Build.09.02.2008.1.Incl.Crack(1).rar moved successfully.
c:\downloads\CuteFTP.Pro.v8.3.2.Build.09.02.2008.1.Incl.Crack.rar moved successfully.

OTM by OldTimer - Version 3.1.12.2 log created on 06112010_071232

Hello.

Click Start > Run and copy/paste the following bolded text into the Run box and click OK:

ComboFix /uninstall

This will also reset your restore points.

Run ESET Online Scan
Please do an online scan with ESET Online Scanner. Please use Internet Explorer as it uses ActiveX.

• Check (tick) this box: YES, I accept the Terms of Use.
  
• Click on the Start button next to it.
  
• When prompted to run ActiveX. click Yes.
  
• You will be asked to install an ActiveX. Click Install.
  
• Once installed, the scanner will be initialized.
  
• After the scanner is initialized, click Start.
  
• Check (tick) Remove found threats box.
  
• Check (tick) Scan unwanted applications.
  
• Click on Scan.
  
• It will start scanning. Please be patient.
  
• Once the scan is done, the log will be saved here: C:\Program Files\esetonlinescanner\log.txt.
  

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=7
# iexplore.exe=7.00.6000.20583 (vista_ldr.070420-1500)
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=04cea6c5f359f840be353234ea7998f4
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2010-01-22 04:58:19
# local_time=2010-01-22 11:58:19 (+0700, SE Asia Standard Time)
# country="United States"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode=512 16777215 100 0 359024 359024 0 0
# compatibility_mode=1280 16777175 100 0 44163294 44163294 0 0
# compatibility_mode=8192 67108863 100 0 146323 146323 0 0
# scanned=143667
# found=1
# cleaned=1
# scan_time=1800
C:\Program Files\Vietkey2000\vknt.exe probably a variant of Win32/Agent trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
# version=7
# iexplore.exe=7.00.6000.20583 (vista_ldr.070420-1500)
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=04cea6c5f359f840be353234ea7998f4
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2010-06-01 01:56:34
# local_time=2010-06-01 08:56:34 (+0700, SE Asia Standard Time)
# country="United States"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=512 16777215 100 0 11534159 11534159 0 0
# compatibility_mode=1280 16777175 100 0 55338429 55338429 0 0
# compatibility_mode=8192 67108863 100 0 11321458 11321458 0 0
# scanned=144421
# found=0
# cleaned=0
# scan_time=4559
# version=7
# iexplore.exe=7.00.6000.20583 (vista_ldr.070420-1500)
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=04cea6c5f359f840be353234ea7998f4
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2010-06-22 04:18:58
# local_time=2010-06-22 11:18:58 (+0700, SE Asia Standard Time)
# country="United States"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=512 16777215 100 0 13402624 13402624 0 0
# compatibility_mode=1280 16777175 100 0 57206894 57206894 0 0
# compatibility_mode=8192 67108863 100 0 13189923 13189923 0 0
# scanned=143357
# found=0
# cleaned=0
# scan_time=2239

How is the machine running now?